General
- Target 2026-08-04_e2c210d49e1297651ecdcaf8a05e50a3_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 15.5MB
- Sample260804-12ft9aeq8z
- SHA256 c98c4077f3b54ffab7c3b9e321ef9f43bb1adba20f0463345fc943bafdded1ab
- MD5 e2c210d49e1297651ecdcaf8a05e50a3
- SHA1 197e9c09b05c0af71f4dff8b06917e47decc8000
- SHA512 033bbebf1082cd795a3b38ff6a3d9603c61be8f68e452147e3b65a59b3fd0827027cbd72466c4be748d6105b248696f937c4f8e7874ee779a0f02e6b6d70127e
- SSDEEP 196608:WYGt0La39CZhMTfhcIQeGZF6bUpMBF1p/kjRm4OWi2bc8:w7oZSKpIbUwF1VERmj2bp
- TLSH T194F6CF1272E404A6D16A913ACB22863597B17C2A8FF2C7DF315076CE1E736C17A3A717
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-04_e2c210d49e1297651ecdcaf8a05e50a3_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_i.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_e2c210d49e1297651ecdcaf8a05e50a3_akira_amadey_cobalt-strike_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 15.5MB
- SHA256 c98c4077f3b54ffab7c3b9e321ef9f43bb1adba20f0463345fc943bafdded1ab
- MD5 e2c210d49e1297651ecdcaf8a05e50a3
- SHA1 197e9c09b05c0af71f4dff8b06917e47decc8000
- SHA512 033bbebf1082cd795a3b38ff6a3d9603c61be8f68e452147e3b65a59b3fd0827027cbd72466c4be748d6105b248696f937c4f8e7874ee779a0f02e6b6d70127e
- SSDEEP 196608:WYGt0La39CZhMTfhcIQeGZF6bUpMBF1p/kjRm4OWi2bc8:w7oZSKpIbUwF1VERmj2bp
- TLSH T194F6CF1272E404A6D16A913ACB22863597B17C2A8FF2C7DF315076CE1E736C17A3A717
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory